Zero trust removes implicit trust in network position, not confidence in colleagues

Zero trust is a badly named idea. It is not about distrusting people.

It means a request should not be trusted merely because of where it came from. Being inside the office network used to be treated as evidence of legitimacy, and that assumption stopped being safe once laptops, cloud services and suppliers were all in the mix. Every request gets checked on its own merits instead. The name suggests suspicion of staff; the substance is about not using the network cable as a credential.